CVE-2011-2998 Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a la...
HighCVSS 10.0
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 3.6 | No fix listed |
| mozilla Firefox | = 3.6.2 | No fix listed |
| mozilla Firefox | = 3.6.3 | No fix listed |
| mozilla Firefox | = 3.6.4 | No fix listed |
| mozilla Firefox | = 3.6.6 | No fix listed |
| mozilla Firefox | = 3.6.7 | No fix listed |
| mozilla Firefox | = 3.6.8 | No fix listed |
| mozilla Firefox | = 3.6.9 | No fix listed |
| mozilla Firefox | = 3.6.10 | No fix listed |
| mozilla Firefox | = 3.6.11 | No fix listed |
| mozilla Firefox | = 3.6.12 | No fix listed |
| mozilla Firefox | = 3.6.13 | No fix listed |
| mozilla Firefox | = 3.6.14 | No fix listed |
| mozilla Firefox | = 3.6.15 | No fix listed |
| mozilla Firefox | = 3.6.16 | No fix listed |
| mozilla Firefox | = 3.6.17 | No fix listed |
| mozilla Firefox | = 3.6.18 | No fix listed |
| mozilla Firefox | = 3.6.19 | No fix listed |
| mozilla Firefox | = 3.6.20 | No fix listed |
| mozilla Firefox | = 3.6.21 | No fix listed |
| mozilla Firefox | = 3.6.22 | No fix listed |
References
- SUSE-SU-2011:1256 vendor-advisory
- DSA-2312 vendor-advisory
- DSA-2313 vendor-advisory
- DSA-2317 vendor-advisory
- MDVSA-2011:139 vendor-advisory
- MDVSA-2011:140 vendor-advisory
- MDVSA-2011:141 vendor-advisory
- www.mozilla.org vendor-advisory
- RHSA-2011:1341 vendor-advisory
- bugzilla.mozilla.org
- oval:org.mitre.oval:def:14012 signature vdb-entry